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We review the existing literature on Java safety, emphasizing formal approaches, and the 
Impact of Java safety on small footprint devices such as smartcards. The conclusion is that 
although a lot of good work has been done, a more concerted effort is needed to build a 
coherent set of machine-readable formal models of the whole of Java and its 
implementation. This is a formidable task but we believe it is essential to build trust in Java 
safety, and thence to achieve ITSEC level 6 or Common Crite ... 
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Issue 5 
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This paper describes the motivation, architecture and performance of a distributed virtual 
machine (DVM) for networked computers. DVMs rely on a distributed service architecture to 
meet the manageability, security and uniformity requirements of large, heterogeneous 
clusters of networked computers. In a DVM, system services, such as verification, security 
enforcement, compilation and optimization, are factored out of clients and located on 
powerful network servers. This partitioning of system fun ... 
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